Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
File: DcnBtxcVahijTZMjtnoKA-2oWsk.mft (raw, json)
Hash identifier: JVkftgXZZS4USSceBk0BQv4E9HkaY/Ev0mrK1/HbpIU=
Subject key identifier: CE:D8:1B:C6:8E:89:CC:EC:52:EC:7F:32:6B:DC:28:35:25:0E:F3:CC
Authority key identifier: 0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
Certificate issuer: /CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Certificate serial: 019D296170112341A2B8C1BE6E40C204A499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 09:02:24 +0000
Manifest this update: Thu 26 Mar 2026 09:02:24 +0000
Manifest next update: Fri 27 Mar 2026 09:02:24 +0000
Files and hashes: 1: DcnBtxcVahijTZMjtnoKA-2oWsk.crl (hash: bPJtmihaesp6OU1VJoog0NTfyZMyTSutb1NmtAGd/Zs=)
2: oCylTxdWStUJKd43isiQRqgUx2I.roa (hash: BA+lkIFGOjmKiy8Zq7wyWqkb5r7mqiejaQ24ZYtS4FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:70:11:23:41:a2:b8:c1:be:6e:40:c2:04:a4:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dc9c1b717156a18a34d9323b67a0a03eda85ac9
Validity
Not Before: Mar 26 09:02:24 2026 GMT
Not After : Mar 27 09:02:24 2026 GMT
Subject: CN=ced81bc68e89ccec52ec7f326bdc2835250ef3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:be:65:2e:ac:b3:a5:01:a4:1b:d1:71:67:b4:
21:86:be:c4:44:ce:18:7f:cb:9f:26:1f:a4:9e:16:
fa:47:49:a4:55:eb:e7:ac:ec:f2:27:65:2e:1b:91:
91:eb:69:37:c8:99:39:fd:95:f8:c2:23:b6:c5:64:
b7:57:05:e0:bc:41:bf:44:42:32:2b:aa:85:ef:ae:
c1:60:a5:90:6f:12:67:5b:e7:45:41:bd:f8:73:ef:
6f:16:54:b4:c8:ca:2a:9f:0f:68:d6:59:29:ee:85:
b7:6c:cf:bd:f5:74:45:9d:e5:73:ce:c0:02:76:24:
84:7b:97:a9:eb:5c:f9:d3:87:f3:95:92:f5:ab:c7:
08:86:28:b7:50:59:4e:fd:51:51:a2:ea:a1:e1:85:
28:4c:18:2a:37:46:75:94:33:98:51:48:f0:97:52:
2a:e4:a4:04:fd:e1:bb:6a:9a:d5:ba:11:b8:0e:b3:
54:01:f5:3e:fe:06:ac:d6:0f:ef:65:73:43:ee:e5:
c7:e5:91:95:08:66:74:62:b8:f9:c7:86:ca:59:b3:
aa:54:49:4e:a3:b3:ea:5b:fa:6e:58:52:9f:f3:32:
19:56:33:1f:21:49:47:09:fe:f3:1c:d1:e2:c3:41:
de:41:1c:86:e2:62:76:d0:27:25:56:4c:64:27:f0:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:1B:C6:8E:89:CC:EC:52:EC:7F:32:6B:DC:28:35:25:0E:F3:CC
X509v3 Authority Key Identifier:
keyid:0D:C9:C1:B7:17:15:6A:18:A3:4D:93:23:B6:7A:0A:03:ED:A8:5A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcnBtxcVahijTZMjtnoKA-2oWsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/DcnBtxcVahijTZMjtnoKA-2oWsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a2:b5:13:ac:4e:77:3b:47:87:a6:58:64:f3:1b:70:79:a9:
e0:d7:d6:b0:e2:ec:63:ec:dc:72:b9:9d:b5:04:0b:81:75:87:
e9:7f:27:14:cc:62:3f:51:58:3d:39:ad:ef:7d:b4:73:ca:39:
6b:40:e3:34:6d:68:ab:19:f5:4c:07:1e:5c:6b:0f:19:04:dc:
28:45:6c:e4:23:da:8b:83:21:23:27:90:26:49:3c:93:35:4d:
42:da:69:28:46:b7:18:e1:1e:b1:14:3b:81:6d:3b:0c:23:83:
e6:4e:f5:9f:1c:1e:22:78:9e:eb:39:9a:c5:72:fd:e0:92:76:
aa:52:44:a8:63:84:71:92:49:51:07:d7:01:da:86:39:a6:b3:
0a:f8:48:9c:a1:e0:6d:bd:7a:04:1a:bf:f6:bf:fb:64:dc:5d:
49:6d:79:db:1f:c3:a7:2e:bf:d0:24:73:78:ad:c0:ff:91:2a:
6b:18:63:ff:ac:37:e4:bd:17:5d:b9:1b:0b:08:a9:a2:80:26:
8a:1d:6c:6b:98:33:b5:9c:8b:4c:ca:bf:3f:91:b7:73:9b:d1:
33:3b:37:eb:ef:ad:b6:40:a7:9a:21:be:19:91:66:a5:a5:42:
9c:d5:6d:a0:3d:00:09:df:f3:a9:ee:2e:fc:0b:97:9c:b9:b1:
c6:3a:7b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:01 2026 by rpki-client